diff options
| author |  Sadie Powell | 2026-07-23 10:06:25 +0100 |
|---|---|---|
| committer | Sadie Powell | 2026-07-23 10:06:25 +0100 |
| commit | ddb39bffe9b5d6aedee0f474eb2b8da4eef244bd (patch) | |
| tree | 5c5e9ab989e58f114cc369ab87037004e1010f84 | |
| parent | Add a separate config option for setting a WebSocket STS port. (diff) | |
Add network connection filtering to the AppArmor profile.
| -rw-r--r-- | make/template/apparmor | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/make/template/apparmor b/make/template/apparmor index 5c41fd247..a7329f7ba 100644 --- a/make/template/apparmor +++ b/make/template/apparmor @@ -31,6 +31,16 @@ profile inspircd @BINARY_DIR@/inspircd { capability setuid, capability sys_resource, + # Required for client connections: + network inet stream tcp, + network inet6 stream tcp, + network inet stream sctp, + network inet6 stream sctp, + + # Required for DNS lookups: + network inet dgram udp, + network inet6 dgram udp, + @BINARY_DIR@/inspircd ixr, @CONFIG_DIR@/** rw, @DATA_DIR@/** rw, |